Granted Patent B2

US 12,437,046 · App. 18/063,264 · Granted Oct 7, 2025

Inventors: Oleksii Piskun (Kyiv, UA); Vitalii Petrychenko (Kyiv, UA); Mykola Alieksieiev (Kyiv, UA); Oleg Kopysov (Kyiv, UA); Stanislav Pedan (Kyiv, UA)

Assignee: Samsung Electronics Co., Ltd.

G06F21/32G06F21/45G06F21/602

Abstract

Claims (66)

1. A method of performing authentication by an electronic apparatus, the method comprising:

receiving an access request to an application executed on the electronic apparatus and biometric information of a user of the electronic apparatus;

identifying an authentication level required in the application;

based on a result of comparing the authentication level with a preset value, obtaining either public helper data stored in a server or private helper data stored in the electronic apparatus as helper data used for user authentication;

obtaining an encryption key based on the biometric information of the user and either the public helper data or the private helper data by using a fuzzy extractor; and

performing user authentication for accessing the application, based on the encryption key,

wherein the public helper data is used to generate the encryption key for access to an application that requires security greater than or equal to a reference value, and the private helper data is used to generate the encryption key for access to an application that requires security lower than the reference value.

2. The method of claim 1 , further comprising:

requesting user information registration via a user information registration request; and

generating the encryption key corresponding to the biometric information of the user, the public helper data, and the private helper data, by using the fuzzy extractor, from the biometric information of the user obtained according to the user information registration request,

wherein the public helper data is transmitted to a server, the private helper data is stored in the electronic apparatus, and the encryption key corresponding to the biometric information of the user is deleted.

3. The method of claim 1 , wherein the obtaining of the private helper data comprises:

based on the authentication level being less than the preset value, obtaining private helper data corresponding to the authentication level from at least one piece of the private helper data stored in the electronic apparatus.

4. The method of claim 3 , wherein the obtaining of the encryption key comprises:

identifying whether a degree of matching between a hash value corresponding to the biometric information of the user and a hash value corresponding to the private helper data is greater than or equal to a first threshold value; and

obtaining the encryption key by using the biometric information of the user, the private helper data, and a Rep function, based on whether the degree of matching is greater than or equal to the first threshold value.

5. The method of claim 3 , wherein the obtaining of the private helper data comprises:

based on the authentication level being greater than or equal to the preset value, requesting public helper data from a server; and

receiving the public helper data from the server, based on the requesting.

6. The method of claim 5 , wherein the obtaining of the encryption key comprises:

identifying whether a degree of matching between a hash value corresponding to the biometric information of the user and a hash value corresponding to the public helper data is greater than or equal to a second threshold value; and

obtaining the encryption key by using the biometric information of the user, the public helper data, and a Rep function, based on whether the degree of matching is greater than or equal to the second threshold value.

7. The method of claim 1 , further comprising:

receiving a recovery request of the private helper data;

receiving second biometric information;

identifying whether a degree of matching between a hash value corresponding to the second biometric information and a hash value corresponding to the public helper data is greater than or equal to a third threshold value, based on the public helper data received from a server; and

generating the encryption key and the private helper data by using the second biometric information, the public helper data, and a Rep function, based on whether the degree of matching is greater than or equal to the third threshold value.

8. An electronic apparatus for performing authentication, the electronic apparatus comprising:

a communication unit;

memory storing one or more instructions; and

at least one processor configured to execute the one or more instructions stored in the memory,

wherein the at least one processor is further configured to:

receive an access request to an application executed on the electronic apparatus and biometric information of a user of the electronic apparatus,

identify an authentication level required in the application,

based on a result of comparing the authentication level with a preset value, obtain either public helper data stored in a server or private helper data stored in the electronic apparatus as helper data used for user authentication,

obtain an encryption key based on the biometric information of the user and either the public helper data or the private helper data by using a fuzzy extractor, and

perform user authentication for accessing the application, based on the encryption key, and

wherein the public helper data is used to generate the encryption key for access to an application that requires security greater than or equal to a reference value, and the private helper data is used to generate the encryption key for access to an application that requires security lower than the reference value.

9. The electronic apparatus of claim 8 ,

wherein the at least one processor is further configured to:

request user information registration via a user information registration request; and

generate the encryption key corresponding to the biometric information of the user, the public helper data, and the private helper data, by using the fuzzy extractor, from biometric information of the user obtained according to the user information registration request, and

wherein the public helper data is transmitted to a server, the private helper data is stored in the electronic apparatus, and the encryption key corresponding to the biometric information of the user is deleted.

10. The electronic apparatus of claim 8 , wherein the at least one processor is further configured to:

based on the authentication level being less than the preset value, obtain private helper data corresponding to the authentication level, from at least one piece of the private helper data stored in the electronic apparatus.

11. The electronic apparatus of claim 10 , wherein the at least one processor is further configured to:

identify whether a degree of matching between a hash value corresponding to the biometric information of the user and a hash value corresponding to the private helper data is greater than or equal to a first threshold value; and

obtain the encryption key by using the biometric information of the user, the private helper data, and a Rep function, based on whether the degree of matching is greater than or equal to the first threshold value.

12. The electronic apparatus of claim 10 , wherein the at least one processor is further configured to:

when the authentication level is greater than or equal to the preset value, control the communication unit to request public helper data from a server; and

control the communication unit to receive the public helper data from the server, based on the requesting.

13. The electronic apparatus of claim 12 , wherein the at least one processor is further configured to:

identify whether a degree of matching between a hash value corresponding to the biometric information of the user and a hash value corresponding to the public helper data is greater than or equal to a second threshold value; and

obtain the encryption key by using the biometric information of the user, the public helper data, and a Rep function, based on whether the degree of matching is greater than or equal to the second threshold value.

14. The electronic apparatus of claim 8 , wherein the at least one processor is further configured to:

receive a recovery request of the private helper data;

receive second biometric information;

identify whether a degree of matching between a hash value corresponding to the second biometric information and a hash value corresponding to the public helper data is greater than or equal to a third threshold value, based on the public helper data received from a server; and

generate the encryption key and the private helper data by using the second biometric information, the public helper data, and a Rep function, based on whether the degree of matching is greater than or equal to the third threshold value.

15. A non-transitory computer-readable recording medium having stored therein one or more instructions, which causes an electronic apparatus to:

receive an access request to an application executed on the electronic apparatus and biometric information of a user of the electronic apparatus;

identify an authentication level required in the application;

based on a result of comparing the authentication level with a preset value, obtain either public helper data stored in a server or private helper data stored in the electronic apparatus as helper data used for user authentication;

obtain an encryption key based on the biometric information of the user and either the public helper data or the private helper data by using a fuzzy extractor; and

perform user authentication for accessing the application, based on the encryption key,

wherein the public helper data is used to generate the encryption key for access to an application that requires security greater than or equal to a reference value, and the private helper data is used to generate the encryption key for access to an application that requires security lower than the reference value.

Assignments (1)

Priority Claims (1)

Continuity (2)

References Cited (29)